CVE-2011-1526 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2011-1526 Interim 1 26 2025-11-05T05:49:40Z current 2021-05-30T12:57:08Z 2025-11-05T05:49:40Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2011-1526 ftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.1 and earlier does not check the krb5_setegid return value, which allows remote authenticated users to bypass intended group access restrictions, and create, overwrite, delete, or read files, via standard FTP commands, related to missing autoconf tests in a configure script. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IP6APFNO75XHIPIGT6HIZFCP7NU7LPF4/#IP6APFNO75XHIPIGT6HIZFCP7NU7LPF4 E-Mail link for SUSE-SU-2011:1171-1 https://www.suse.com/support/kb/doc/?id=7008962 E-Mail link for TID7008962 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SN4GMTECRTWUFX2HOGC6WVJORD4NBWNB/#SN4GMTECRTWUFX2HOGC6WVJORD4NBWNB E-Mail link for openSUSE-SU-2011:1169-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 openSUSE Tumbleweed krb5-1.6.3-133.48.48.1 krb5-1.6.3-133.49.54.1 krb5-1.6.3-133.49.66.1 krb5-32bit-1.6.3-133.48.48.1 krb5-32bit-1.6.3-133.49.54.1 krb5-32bit-1.6.3-133.49.66.1 krb5-appl krb5-appl-clients krb5-appl-clients-1.0.3-1.1 krb5-appl-clients-1.0.3-1.2 krb5-appl-clients-1.0.3-1.5 krb5-appl-servers krb5-appl-servers-1.0.3-1.1 krb5-appl-servers-1.0.3-1.2 krb5-appl-servers-1.0.3-1.5 krb5-apps-clients-1.6.3-133.48.48.1 krb5-apps-clients-1.6.3-133.49.54.1 krb5-apps-clients-1.6.3-133.49.66.1 krb5-apps-servers-1.6.3-133.48.48.1 krb5-apps-servers-1.6.3-133.49.54.1 krb5-apps-servers-1.6.3-133.49.66.1 krb5-client-1.6.3-133.48.48.1 krb5-client-1.6.3-133.49.54.1 krb5-client-1.6.3-133.49.66.1 krb5-devel-1.6.3-133.49.66.1 krb5-devel-32bit-1.6.3-133.49.66.1 krb5-plugin-kdb-ldap-1.6.3-133.49.54.1 krb5-plugin-kdb-ldap-1.6.3-133.49.66.1 krb5-plugin-preauth-pkinit-1.6.3-133.49.54.1 krb5-plugin-preauth-pkinit-1.6.3-133.49.66.1 krb5-server-1.6.3-133.48.48.1 krb5-server-1.6.3-133.49.54.1 krb5-server-1.6.3-133.49.66.1 krb5-x86-1.6.3-133.48.48.1 krb5-x86-1.6.3-133.49.54.1 krb5-x86-1.6.3-133.49.66.1 krb5-appl-clients-1.0.3-1.5 as a component of SUSE Linux Enterprise Desktop 12 krb5-appl-clients-1.0.3-1.5 as a component of SUSE Linux Enterprise Desktop 12 SP1 krb5-appl-clients-1.0.3-1.5 as a component of SUSE Linux Enterprise Desktop 12 SP2 krb5-appl-clients-1.0.3-1.5 as a component of SUSE Linux Enterprise Desktop 12 SP3 krb5-appl-clients-1.0.3-1.5 as a component of SUSE Linux Enterprise Desktop 12 SP4 krb5-appl-clients-1.0.3-1.5 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 krb5-appl-servers-1.0.3-1.5 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 krb5-1.6.3-133.48.48.1 as a component of SUSE Linux Enterprise Server 11 SP2 krb5-32bit-1.6.3-133.48.48.1 as a component of SUSE Linux Enterprise Server 11 SP2 krb5-apps-clients-1.6.3-133.48.48.1 as a component of SUSE Linux Enterprise Server 11 SP2 krb5-apps-servers-1.6.3-133.48.48.1 as a component of SUSE Linux Enterprise Server 11 SP2 krb5-client-1.6.3-133.48.48.1 as a component of SUSE Linux Enterprise Server 11 SP2 krb5-server-1.6.3-133.48.48.1 as a component of SUSE Linux Enterprise Server 11 SP2 krb5-x86-1.6.3-133.48.48.1 as a component of SUSE Linux Enterprise Server 11 SP2 krb5-1.6.3-133.49.54.1 as a component of SUSE Linux Enterprise Server 11 SP3 krb5-32bit-1.6.3-133.49.54.1 as a component of SUSE Linux Enterprise Server 11 SP3 krb5-apps-clients-1.6.3-133.49.54.1 as a component of SUSE Linux Enterprise Server 11 SP3 krb5-apps-servers-1.6.3-133.49.54.1 as a component of SUSE Linux Enterprise Server 11 SP3 krb5-client-1.6.3-133.49.54.1 as a component of SUSE Linux Enterprise Server 11 SP3 krb5-plugin-kdb-ldap-1.6.3-133.49.54.1 as a component of SUSE Linux Enterprise Server 11 SP3 krb5-plugin-preauth-pkinit-1.6.3-133.49.54.1 as a component of SUSE Linux Enterprise Server 11 SP3 krb5-server-1.6.3-133.49.54.1 as a component of SUSE Linux Enterprise Server 11 SP3 krb5-x86-1.6.3-133.49.54.1 as a component of SUSE Linux Enterprise Server 11 SP3 krb5-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP4 krb5-32bit-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP4 krb5-apps-clients-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP4 krb5-apps-servers-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP4 krb5-client-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP4 krb5-plugin-kdb-ldap-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP4 krb5-plugin-preauth-pkinit-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP4 krb5-server-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP4 krb5-x86-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP4 krb5-appl-clients-1.0.3-1.5 as a component of SUSE Linux Enterprise Server 12 krb5-appl-servers-1.0.3-1.5 as a component of SUSE Linux Enterprise Server 12 krb5-appl-clients-1.0.3-1.5 as a component of SUSE Linux Enterprise Server 12 SP1 krb5-appl-servers-1.0.3-1.5 as a component of SUSE Linux Enterprise Server 12 SP1 krb5-appl-clients-1.0.3-1.5 as a component of SUSE Linux Enterprise Server 12 SP2 krb5-appl-servers-1.0.3-1.5 as a component of SUSE Linux Enterprise Server 12 SP2 krb5-appl-clients-1.0.3-1.5 as a component of SUSE Linux Enterprise Server 12 SP3 krb5-appl-servers-1.0.3-1.5 as a component of SUSE Linux Enterprise Server 12 SP3 krb5-appl-clients-1.0.3-1.5 as a component of SUSE Linux Enterprise Server 12 SP4 krb5-appl-servers-1.0.3-1.5 as a component of SUSE Linux Enterprise Server 12 SP4 krb5-appl-clients-1.0.3-1.5 as a component of SUSE Linux Enterprise Server 12 SP5 krb5-appl-servers-1.0.3-1.5 as a component of SUSE Linux Enterprise Server 12 SP5 krb5-appl-clients-1.0.3-1.2 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 krb5-appl-servers-1.0.3-1.2 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 krb5-appl-clients-1.0.3-1.5 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 krb5-appl-servers-1.0.3-1.5 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 krb5-devel-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 krb5-devel-32bit-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 krb5-server-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 krb5-appl-clients-1.0.3-1.1 as a component of openSUSE Tumbleweed krb5-appl-servers-1.0.3-1.1 as a component of openSUSE Tumbleweed krb5-appl-clients as a component of HPE Helion OpenStack 8 krb5-appl-servers as a component of HPE Helion OpenStack 8 krb5-appl as a component of HPE Helion OpenStack 8 krb5-appl as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 krb5-appl-clients as a component of SUSE Linux Enterprise Server 12 SP2-BCL krb5-appl-servers as a component of SUSE Linux Enterprise Server 12 SP2-BCL krb5-appl as a component of SUSE Linux Enterprise Server 12 SP2-BCL krb5-appl-clients as a component of SUSE Linux Enterprise Server 12 SP3-BCL krb5-appl-servers as a component of SUSE Linux Enterprise Server 12 SP3-BCL krb5-appl as a component of SUSE Linux Enterprise Server 12 SP3-BCL krb5-appl-clients as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS krb5-appl-servers as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS krb5-appl as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS krb5-appl-clients as a component of SUSE Linux Enterprise Server 12 SP3-LTSS krb5-appl-servers as a component of SUSE Linux Enterprise Server 12 SP3-LTSS krb5-appl as a component of SUSE Linux Enterprise Server 12 SP3-LTSS krb5-appl-clients as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS krb5-appl-servers as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS krb5-appl as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS krb5-appl-clients as a component of SUSE Linux Enterprise Server 12 SP4-LTSS krb5-appl-servers as a component of SUSE Linux Enterprise Server 12 SP4-LTSS krb5-appl as a component of SUSE Linux Enterprise Server 12 SP4-LTSS krb5-appl-clients as a component of SUSE Linux Enterprise Server 12 SP5 krb5-appl-servers as a component of SUSE Linux Enterprise Server 12 SP5 krb5-appl as a component of SUSE Linux Enterprise Server 12 SP5 krb5-appl as a component of SUSE Linux Enterprise Server Teradata 12 SP3 krb5-appl-clients as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 krb5-appl-servers as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 krb5-appl as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 krb5-appl-clients as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 krb5-appl-servers as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 krb5-appl as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 krb5-appl as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 krb5-appl-clients as a component of SUSE OpenStack Cloud 8 krb5-appl-servers as a component of SUSE OpenStack Cloud 8 krb5-appl as a component of SUSE OpenStack Cloud 8 krb5-appl-clients as a component of SUSE OpenStack Cloud 9 krb5-appl-servers as a component of SUSE OpenStack Cloud 9 krb5-appl as a component of SUSE OpenStack Cloud 9 krb5-appl-clients as a component of SUSE OpenStack Cloud Crowbar 8 krb5-appl-servers as a component of SUSE OpenStack Cloud Crowbar 8 krb5-appl as a component of SUSE OpenStack Cloud Crowbar 8 krb5-appl-clients as a component of SUSE OpenStack Cloud Crowbar 9 krb5-appl-servers as a component of SUSE OpenStack Cloud Crowbar 9 krb5-appl as a component of SUSE OpenStack Cloud Crowbar 9 ftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.1 and earlier does not check the krb5_setegid return value, which allows remote authenticated users to bypass intended group access restrictions, and create, overwrite, delete, or read files, via standard FTP commands, related to missing autoconf tests in a configure script. CVE-2011-1526 SUSE Linux Enterprise Desktop 12:krb5-appl-clients-1.0.3-1.5 SUSE Linux Enterprise Desktop 12 SP1:krb5-appl-clients-1.0.3-1.5 SUSE Linux Enterprise Desktop 12 SP2:krb5-appl-clients-1.0.3-1.5 SUSE Linux Enterprise Desktop 12 SP3:krb5-appl-clients-1.0.3-1.5 SUSE Linux Enterprise Desktop 12 SP4:krb5-appl-clients-1.0.3-1.5 SUSE Linux Enterprise High Performance Computing 12 SP5:krb5-appl-clients-1.0.3-1.5 SUSE Linux Enterprise High Performance Computing 12 SP5:krb5-appl-servers-1.0.3-1.5 SUSE Linux Enterprise Server 11 SP2:krb5-1.6.3-133.48.48.1 SUSE Linux Enterprise Server 11 SP2:krb5-32bit-1.6.3-133.48.48.1 SUSE Linux Enterprise Server 11 SP2:krb5-apps-clients-1.6.3-133.48.48.1 SUSE Linux Enterprise Server 11 SP2:krb5-apps-servers-1.6.3-133.48.48.1 SUSE Linux Enterprise Server 11 SP2:krb5-client-1.6.3-133.48.48.1 SUSE Linux Enterprise Server 11 SP2:krb5-server-1.6.3-133.48.48.1 SUSE Linux Enterprise Server 11 SP2:krb5-x86-1.6.3-133.48.48.1 SUSE Linux Enterprise Server 11 SP3:krb5-1.6.3-133.49.54.1 SUSE Linux Enterprise Server 11 SP3:krb5-32bit-1.6.3-133.49.54.1 SUSE Linux Enterprise Server 11 SP3:krb5-apps-clients-1.6.3-133.49.54.1 SUSE Linux Enterprise Server 11 SP3:krb5-apps-servers-1.6.3-133.49.54.1 SUSE Linux Enterprise Server 11 SP3:krb5-client-1.6.3-133.49.54.1 SUSE Linux Enterprise Server 11 SP3:krb5-plugin-kdb-ldap-1.6.3-133.49.54.1 SUSE Linux Enterprise Server 11 SP3:krb5-plugin-preauth-pkinit-1.6.3-133.49.54.1 SUSE Linux Enterprise Server 11 SP3:krb5-server-1.6.3-133.49.54.1 SUSE Linux Enterprise Server 11 SP3:krb5-x86-1.6.3-133.49.54.1 SUSE Linux Enterprise Server 11 SP4:krb5-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP4:krb5-32bit-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP4:krb5-apps-clients-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP4:krb5-apps-servers-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP4:krb5-client-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP4:krb5-plugin-kdb-ldap-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP4:krb5-plugin-preauth-pkinit-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP4:krb5-server-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP4:krb5-x86-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 12:krb5-appl-clients-1.0.3-1.5 SUSE Linux Enterprise Server 12:krb5-appl-servers-1.0.3-1.5 SUSE Linux Enterprise Server 12 SP1:krb5-appl-clients-1.0.3-1.5 SUSE Linux Enterprise Server 12 SP1:krb5-appl-servers-1.0.3-1.5 SUSE Linux Enterprise Server 12 SP2:krb5-appl-clients-1.0.3-1.5 SUSE Linux Enterprise Server 12 SP2:krb5-appl-servers-1.0.3-1.5 SUSE Linux Enterprise Server 12 SP3:krb5-appl-clients-1.0.3-1.5 SUSE Linux Enterprise Server 12 SP3:krb5-appl-servers-1.0.3-1.5 SUSE Linux Enterprise Server 12 SP4:krb5-appl-clients-1.0.3-1.5 SUSE Linux Enterprise Server 12 SP4:krb5-appl-servers-1.0.3-1.5 SUSE Linux Enterprise Server 12 SP5:krb5-appl-clients-1.0.3-1.5 SUSE Linux Enterprise Server 12 SP5:krb5-appl-servers-1.0.3-1.5 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:krb5-appl-clients-1.0.3-1.2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:krb5-appl-servers-1.0.3-1.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-clients-1.0.3-1.5 SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl-servers-1.0.3-1.5 SUSE Linux Enterprise Software Development Kit 11 SP4:krb5-devel-1.6.3-133.49.66.1 SUSE Linux Enterprise Software Development Kit 11 SP4:krb5-devel-32bit-1.6.3-133.49.66.1 SUSE Linux Enterprise Software Development Kit 11 SP4:krb5-server-1.6.3-133.49.66.1 openSUSE Tumbleweed:krb5-appl-clients-1.0.3-1.1 openSUSE Tumbleweed:krb5-appl-servers-1.0.3-1.1 HPE Helion OpenStack 8:krb5-appl HPE Helion OpenStack 8:krb5-appl-clients HPE Helion OpenStack 8:krb5-appl-servers SUSE Linux Enterprise High Performance Computing 12 SP5:krb5-appl SUSE Linux Enterprise Server 12 SP2-BCL:krb5-appl SUSE Linux Enterprise Server 12 SP2-BCL:krb5-appl-clients SUSE Linux Enterprise Server 12 SP2-BCL:krb5-appl-servers SUSE Linux Enterprise Server 12 SP3-BCL:krb5-appl SUSE Linux Enterprise Server 12 SP3-BCL:krb5-appl-clients SUSE Linux Enterprise Server 12 SP3-BCL:krb5-appl-servers SUSE Linux Enterprise Server 12 SP3-ESPOS:krb5-appl SUSE Linux Enterprise Server 12 SP3-ESPOS:krb5-appl-clients SUSE Linux Enterprise Server 12 SP3-ESPOS:krb5-appl-servers SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-clients SUSE Linux Enterprise Server 12 SP3-LTSS:krb5-appl-servers SUSE Linux Enterprise Server 12 SP4-ESPOS:krb5-appl SUSE Linux Enterprise Server 12 SP4-ESPOS:krb5-appl-clients SUSE Linux Enterprise Server 12 SP4-ESPOS:krb5-appl-servers SUSE Linux Enterprise Server 12 SP4-LTSS:krb5-appl SUSE Linux Enterprise Server 12 SP4-LTSS:krb5-appl-clients SUSE Linux Enterprise Server 12 SP4-LTSS:krb5-appl-servers SUSE Linux Enterprise Server 12 SP5:krb5-appl SUSE Linux Enterprise Server 12 SP5:krb5-appl-clients SUSE Linux Enterprise Server 12 SP5:krb5-appl-servers SUSE Linux Enterprise Server Teradata 12 SP3:krb5-appl SUSE Linux Enterprise Server for SAP Applications 12 SP3:krb5-appl SUSE Linux Enterprise Server for SAP Applications 12 SP3:krb5-appl-clients SUSE Linux Enterprise Server for SAP Applications 12 SP3:krb5-appl-servers SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-clients SUSE Linux Enterprise Server for SAP Applications 12 SP4:krb5-appl-servers SUSE Linux Enterprise Server for SAP Applications 12 SP5:krb5-appl SUSE OpenStack Cloud 8:krb5-appl SUSE OpenStack Cloud 8:krb5-appl-clients SUSE OpenStack Cloud 8:krb5-appl-servers SUSE OpenStack Cloud 9:krb5-appl SUSE OpenStack Cloud 9:krb5-appl-clients SUSE OpenStack Cloud 9:krb5-appl-servers SUSE OpenStack Cloud Crowbar 8:krb5-appl SUSE OpenStack Cloud Crowbar 8:krb5-appl-clients SUSE OpenStack Cloud Crowbar 8:krb5-appl-servers SUSE OpenStack Cloud Crowbar 9:krb5-appl SUSE OpenStack Cloud Crowbar 9:krb5-appl-clients SUSE OpenStack Cloud Crowbar 9:krb5-appl-servers moderate 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P